This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS203202.roa File: AS203202.roa (raw, json) Hash identifier: NziX8DVl9KcMW5TrIrtCgffhxgw3AmrXy5Ps7du5+G0= Subject key identifier: 10:15:2E:0B:E8:FA:5F:80:03:53:95:B1:89:BE:50:E4:06:F4:6D:92 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 7EEC127A758D10246708C31DFD5F408090FB59C9 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS203202.roa Signing time: Wed 10 Dec 2025 02:15:04 +0000 ROA not before: Wed 10 Dec 2025 02:10:04 +0000 ROA not after: Wed 09 Dec 2026 02:15:04 +0000 asID: 203202 IP address blocks: 2a0f:85c1:dd9::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ec:12:7a:75:8d:10:24:67:08:c3:1d:fd:5f:40:80:90:fb:59:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Dec 10 02:10:04 2025 GMT Not After : Dec 9 02:15:04 2026 GMT Subject: CN=10152E0BE8FA5F80035395B189BE50E406F46D92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a5:b6:52:df:5e:5e:89:56:eb:a5:e5:ef:a2: f1:00:25:28:1c:fc:9c:0a:af:9a:ea:bb:4a:6e:af: 91:8c:29:c3:a8:78:ea:c8:fb:f4:9a:55:db:6d:ee: a4:35:f1:1b:b8:bd:d3:52:5b:cb:30:6a:3e:5d:2e: a1:6b:a8:b6:71:fd:0e:95:7a:ad:09:7f:25:17:3e: 72:d8:03:49:47:56:bb:e9:2a:c9:58:46:a1:75:09: 9a:9c:33:93:ed:17:c4:a2:39:ce:cd:04:03:09:2b: 6b:87:54:a4:bd:10:8d:7a:52:ce:d0:45:fc:98:1a: 06:fe:81:ed:c1:9b:ae:85:51:08:4d:3b:19:76:91: 87:cf:49:c6:59:a9:80:c0:6e:98:90:ae:c0:bc:6b: 5a:3a:2e:b1:0c:62:23:14:e2:ac:9e:80:ea:aa:79: f4:13:8b:bf:2b:08:0a:65:f8:46:4a:fd:2e:2d:e9: d3:30:c2:b1:7c:2f:3e:c6:0b:1d:46:36:f6:f3:4a: b3:6a:b2:72:1a:21:2a:fe:ce:12:7a:0b:2d:e9:e2: 47:0c:e9:93:12:33:c4:95:c7:01:ff:8b:14:1f:64: 29:8c:6c:73:18:1f:d5:c3:42:ba:da:ec:56:d7:50: 02:bc:6c:86:54:ed:69:12:4d:f1:1b:b7:83:61:69: 9d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:15:2E:0B:E8:FA:5F:80:03:53:95:B1:89:BE:50:E4:06:F4:6D:92 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS203202.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:dd9::/48 Signature Algorithm: sha256WithRSAEncryption 5d:c3:25:f1:b3:1f:fe:49:38:88:8b:1c:52:ef:25:d7:be:0c: a7:15:2f:24:57:02:6b:86:7f:d2:11:ea:ca:1e:97:ac:3e:de: 7c:07:d9:61:3c:b1:93:c5:c2:9e:24:a1:98:38:cc:f0:50:e9: 56:5a:3d:0a:ee:bd:ed:38:2c:cc:06:c9:05:30:fe:1f:a2:db: 6a:0f:9c:db:31:b7:b9:e2:3c:08:7f:f0:ce:8a:ec:b9:81:de: 80:9e:8e:88:11:b5:f5:fc:f9:c9:c9:02:b5:94:4d:58:9c:12: 4d:e1:8f:df:64:ad:b7:08:86:ee:a3:29:39:c1:18:92:b6:97: 1f:a0:61:92:99:2c:47:25:3a:7b:4f:57:61:ff:ca:86:91:0d: 8d:06:43:3b:86:7f:8b:1d:85:3c:bb:38:96:6c:3f:1d:21:51: 7d:a6:16:c9:9d:cd:89:b5:ae:65:b6:75:58:f9:0c:79:7a:26: 4d:91:ec:05:44:7e:44:bf:06:76:0d:40:ec:af:47:19:cb:be: ae:d3:c0:13:e5:eb:84:49:fd:05:52:98:1a:67:27:18:e1:52: 93:2d:65:f0:c9:70:cc:63:8b:dc:66:6f:d3:21:46:7c:cc:fc: 67:da:a3:98:62:9e:b2:3d:d2:e3:bc:a5:d7:9c:98:fc:b1:8d: 1b:ed:4f:9d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUfuwSenWNECRnCMMd/V9AgJD7WckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTEyMTAwMjEwMDRaFw0yNjEyMDkwMjE1MDRaMDMxMTAvBgNV BAMTKDEwMTUyRTBCRThGQTVGODAwMzUzOTVCMTg5QkU1MEU0MDZGNDZEOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJpbZS315eiVbrpeXvovEAJSgc /JwKr5rqu0pur5GMKcOoeOrI+/SaVdtt7qQ18Ru4vdNSW8swaj5dLqFrqLZx/Q6V eq0JfyUXPnLYA0lHVrvpKslYRqF1CZqcM5PtF8SiOc7NBAMJK2uHVKS9EI16Us7Q RfyYGgb+ge3Bm66FUQhNOxl2kYfPScZZqYDAbpiQrsC8a1o6LrEMYiMU4qyegOqq efQTi78rCApl+EZK/S4t6dMwwrF8Lz7GCx1GNvbzSrNqsnIaISr+zhJ6Cy3p4kcM 6ZMSM8SVxwH/ixQfZCmMbHMYH9XDQrra7FbXUAK8bIZU7WkSTfEbt4NhaZ1DAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUEBUuC+j6X4ADU5Wxib5Q5Ab0bZIwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjAzMjAyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQ3ZMA0GCSqGSIb3DQEBCwUAA4IBAQBdwyXxsx/+STiIixxS7yXXvgynFS8kVwJr hn/SEerKHpesPt58B9lhPLGTxcKeJKGYOMzwUOlWWj0K7r3tOCzMBskFMP4fottq D5zbMbe54jwIf/DOiuy5gd6Ano6IEbX1/PnJyQK1lE1YnBJN4Y/fZK23CIbuoyk5 wRiStpcfoGGSmSxHJTp7T1dh/8qGkQ2NBkM7hn+LHYU8uziWbD8dIVF9phbJnc2J ta5ltnVY+Qx5eiZNkewFRH5EvwZ2DUDsr0cZy76u08AT5euESf0FUpgaZycY4VKT LWXwyXDMY4vcZm/TIUZ8zPxn2qOYYp6yPdLjvKXXnJj8sY0b7U+d -----END CERTIFICATE-----Generated at Sat Dec 20 15:01:34 2025 by rpki-client